{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T14:00:46Z","timestamp":1726408846032},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319074511"},{"type":"electronic","value":"9783319074528"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-07452-8_5","type":"book-chapter","created":{"date-parts":[[2014,5,21]],"date-time":"2014-05-21T21:53:43Z","timestamp":1400709223000},"page":"119-139","source":"Crossref","is-referenced-by-count":4,"title":["Modeling Security Features of Web Applications"],"prefix":"10.1007","author":[{"given":"Marianne","family":"Busch","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nora","family":"Koch","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Santiago","family":"Suppan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"5_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1007\/978-3-642-11747-3_16","volume-title":"Engineering Secure Software and Systems","author":"D. Basin","year":"2010","unstructured":"Basin, D., Clavel, M., Egea, M., Schl\u00e4pfer, M.: Automatic Generation of Smart, Security-Aware GUI Models. In: Massacci, F., Wallach, D., Zannone, N. (eds.) ESSoS 2010. LNCS, vol.\u00a05965, pp. 201\u2013217. Springer, Heidelberg (2010)"},{"key":"5_CR2","series-title":"LNBIP","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1007\/978-3-642-24511-4_19","volume-title":"Perspectives in Business Informatics Research","author":"M. Busch","year":"2011","unstructured":"Busch, M., Knapp, A., Koch, N.: Modeling Secure Navigation in Web Information Systems. In: Grabis, J., Kirikova, M. (eds.) BIR 2011. LNBIP, vol.\u00a090, pp. 239\u2013253. Springer, Heidelberg (2011)"},{"key":"5_CR3","first-page":"75","volume-title":"Proceedings of the 15th ACM Conference on Computer and Communications Security, CCS 2008","author":"A. Barth","year":"2008","unstructured":"Barth, A., Jackson, C., Mitchell, J.C.: Robust defenses for cross-site request forgery. In: Proceedings of the 15th ACM Conference on Computer and Communications Security, CCS 2008, pp. 75\u201388. ACM, New York (2008)"},{"unstructured":"NESSoS: Network of Excellence on Engineering Secure Future Internet Software Services and Systems (2014), \n                  \n                    http:\/\/nessos-project.eu\/","key":"5_CR4"},{"key":"5_CR5","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"266","DOI":"10.1007\/978-3-319-07452-8_11","volume-title":"Engineering Secure Future Internet Services and Systems","author":"A. Bertolino","year":"2014","unstructured":"Bertolino, A., Busch, M., Daoudagh, S., Lonetti, F., Marchetti, E.: A Toolchain for Designing and Testing Access Control Policies. In: Heisel, M., Joosen, W., Lopez, J., Martinelli, F. (eds.) Engineering Secure Future Internet Services and Systems. LNCS, vol.\u00a08431, pp. 266\u2013286. Springer, Heidelberg (2014)"},{"unstructured":"Cuellar, J., Suppan, S.: A smart metering scenario (2013), \n                  \n                    https:\/\/securitylab.disi.unitn.it\/lib\/exe\/fetch.php?media=research_activities:erise:erise_2013:erise2013-smartmeteering-description.pdf","key":"5_CR6"},{"unstructured":"Cuellar, J.: NESSoS deliverable D11.4 \u2013 Pilot applications, evaluating NESSoS solutions (to appear, 2014)","key":"5_CR7"},{"doi-asserted-by":"crossref","unstructured":"Guerrero, J.M.: Microgrids: Integration of distributed energy resources into the smart-grid. In: IEEE International Symposium on Industrial Electronics, pp. 4281\u20134414 (2010)","key":"5_CR8","DOI":"10.1109\/ISIE.2010.5637667"},{"unstructured":"LMU. Web Engineering Group.: UWE Website (2014), \n                  \n                    http:\/\/uwe.pst.ifi.lmu.de\/","key":"5_CR9"},{"unstructured":"Cubo, J., Cuellar, J., Fries, S., Mart\u00edn, J.A., Moyano, F., Fern\u00e1ndez, G., Gago, M.C.F., Pasic, A., Rom\u00e1n, R., Dieguez, R.T., Vinagre, I.: Selection and documentation of the two major applicationcase studies. NESSoS deliverable D11.2 (2011)","key":"5_CR10"},{"unstructured":"G\u00f3mez, A., Tellechea, M., Rodr\u00edguez, C.: D1.1 Requirements of AMI. Technical report, OPEN meter project (2009)","key":"5_CR11"},{"doi-asserted-by":"crossref","unstructured":"Bennett, C., Wicker, S.: Decreased time delay and security enhancement recommendations for ami smart meter networks. In: Innovative Smart Grid Technologies (ISGT), pp. 1\u20136 (2010)","key":"5_CR12","DOI":"10.1109\/ISGT.2010.5434780"},{"unstructured":"OWASP Foundation: OWASP Top 10 \u2013 2013 (2013), \n                  \n                    http:\/\/owasptop10.googlecode.com\/files\/OWASPTop10-2013.pdf","key":"5_CR13"},{"unstructured":"OMG.: OCL 2.0 (2011), \n                  \n                    http:\/\/www.omg.org\/spec\/OCL\/2.0\/","key":"5_CR14"},{"unstructured":"No Magic Inc.: Magicdraw (2014), \n                  \n                    http:\/\/www.magicdraw.com\/","key":"5_CR15"},{"unstructured":"Busch, M., Koch, N.: NESSoS Deliverable D2.3 \u2013 Second Release of the SDE for Security-Related Tools (2012)","key":"5_CR16"},{"key":"5_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"505","DOI":"10.1007\/978-3-642-02818-2_49","volume-title":"Web Engineering","author":"M. Busch","year":"2009","unstructured":"Busch, M., Koch, N.: MagicUWE \u2014 A CASE Tool Plugin for Modeling Web Applications. In: Gaedke, M., Grossniklaus, M., D\u00edaz, O. (eds.) ICWE 2009. LNCS, vol.\u00a05648, pp. 505\u2013508. Springer, Heidelberg (2009)"},{"unstructured":"Busch, M., Ochoa, M., Schwienbacher, R.: Modeling, Enforcing and Testing Secure Navigation Paths for Web Applications. Technical Report 1301, Ludwig-Maximilians-Universit\u00e4t M\u00fcnchen (2013)","key":"5_CR18"},{"unstructured":"Busch, M., Garc\u00eda de Dios, M.A.: ActionUWE: Transformation of UWE to ActionGUI Models. Technical report, Ludwig-Maximilians-Universit\u00e4t M\u00fcnchen, Number 1203 (2012)","key":"5_CR19"},{"key":"5_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1007\/978-3-642-02818-2_46","volume-title":"Web Engineering","author":"C. Kroiss","year":"2009","unstructured":"Kroiss, C., Koch, N., Knapp, A.: UWE4JSF - A Model-Driven Generation Approach for Web Applications. In: Gaedke, M., Grossniklaus, M., D\u00edaz, O. (eds.) ICWE 2009. LNCS, vol.\u00a05648, pp. 493\u2013496. Springer, Heidelberg (2009)"},{"unstructured":"Eclipse: XPand (2013), \n                  \n                    http:\/\/wiki.eclipse.org\/Xpand","key":"5_CR21"},{"unstructured":"OASIS: eXtensible Access Control Markup Language (XACML) Version 2.0 (2005), \n                  \n                    http:\/\/docs.oasis-open.org\/xacml\/2.0\/access_control-xacml-2.0-core-spec-os.pdf","key":"5_CR22"},{"unstructured":"Wolf, K.: Sicherheitsbezogene Model-to-Code Transformation f\u00fcr Webanwendungen (German), Bachelor Thesis (2012)","key":"5_CR23"},{"doi-asserted-by":"crossref","unstructured":"Busch, M., Koch, N., Masi, M., Pugliese, R., Tiezzi, F.: Towards model-driven development of access control policies for web applications. In: Model-Driven Security Workshop in Conjunction with MoDELS 2012. ACM Digital Library (2012)","key":"5_CR24","DOI":"10.1145\/2422498.2422502"},{"key":"5_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1007\/978-3-642-28166-2_7","volume-title":"Engineering Secure Software and Systems","author":"M. Masi","year":"2012","unstructured":"Masi, M., Pugliese, R., Tiezzi, F.: Formalisation and Implementation of the XACML Access Control Mechanism. In: Barthe, G., Livshits, B., Scandariato, R. (eds.) ESSoS 2012. LNCS, vol.\u00a07159, pp. 60\u201374. Springer, Heidelberg (2012)"},{"unstructured":"SDE: Service Development Environment (2014), \n                  \n                    http:\/\/www.nessos-project.eu\/sde","key":"5_CR26"},{"unstructured":"Soriano, R., Alberto, M., Collazo, J., Gonzales, I., Kupzo, F., Moreno, L., Lugmaier, A., Lorenzo, J.: OpenNode. Open Architecture for Secondary Nodes of the Electricity SmartGrid. In: 21st International Conference on Electricity Distribution (2011)","key":"5_CR27"},{"unstructured":"Department of Energy and Climate Change: Smart Metering Implementation Programme, Response to Prospectus Consultation, Overview Document. Technical report, Office of Gas and Electricity Markets (2011)","key":"5_CR28"},{"doi-asserted-by":"crossref","unstructured":"Beckers, K., Fabender, S., Heisel, M., Suppan, S.: A threat analysis methodology for smart home scenarios. In: SmartGridSec 2014. LNCS. Springer (2014)","key":"5_CR29","DOI":"10.1007\/978-3-319-10329-7_7"},{"unstructured":"Grossman, J.: Website security statistics report. Technical report, WhiteHat Security (2013), \n                  \n                    https:\/\/www.whitehatsec.com\/resource\/stats.html","key":"5_CR30"},{"unstructured":"Busch, M.: Secure Web Engineering supported by an Evaluation Framework. In: Modelsward 2014. Scitepress (2014)","key":"5_CR31"},{"unstructured":"J\u00fcrjens, J.: Secure Systems Development with UML. Springer (2004), Tools and further information: \n                  \n                    http:\/\/www.umlsec.de\/","key":"5_CR32"},{"key":"5_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"426","DOI":"10.1007\/3-540-45800-X_33","volume-title":"\u00abUML\u00bb 2002 - The Unified Modeling Language. Model Engineering, Concepts, and Tools","author":"T. Lodderstedt","year":"2002","unstructured":"Lodderstedt, T., Basin, D., Doser, J.: SecureUML: A UML-Based Modeling Language for Model-Driven Security. In: J\u00e9z\u00e9quel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol.\u00a02460, pp. 426\u2013441. Springer, Heidelberg (2002)"},{"doi-asserted-by":"crossref","unstructured":"Slimani, N., Khambhammettu, H., Adi, K., Logrippo, L.: UACML: Unified Access Control Modeling Language. In: NTMS 2011, pp. 1\u20138 (2011)","key":"5_CR34","DOI":"10.1109\/NTMS.2011.5721143"},{"unstructured":"Hafner, M., Breu, R.: Security Engineering for Service-Oriented Architectures. Springer (2008)","key":"5_CR35"},{"issue":"3","key":"5_CR36","doi-asserted-by":"publisher","first-page":"287","DOI":"10.1007\/s10270-010-0155-y","volume":"10","author":"S. Gilmore","year":"2011","unstructured":"Gilmore, S., G\u00f6nczy, L., Koch, N., Mayer, P., Tribastone, M., Varr\u00f3, D.: Non-functional Properties in the Model-Driven Development of Service-Oriented Systems. J. Softw. Syst. Model.\u00a010(3), 287\u2013311 (2011)","journal-title":"J. Softw. Syst. Model."},{"doi-asserted-by":"crossref","unstructured":"Menzel, M., Meinel, C.: A Security Meta-model for Service-Oriented Architectures. In: Proc.\u00a02009 IEEE Int. Conf. Services Computing (SCC 2009), pp. 251\u2013259. IEEE (2009)","key":"5_CR37","DOI":"10.1109\/SCC.2009.57"}],"container-title":["Lecture Notes in Computer Science","Engineering Secure Future Internet Services and Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-07452-8_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,26]],"date-time":"2019-05-26T18:15:21Z","timestamp":1558894521000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-07452-8_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319074511","9783319074528"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-07452-8_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2014]]}}}